Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
File: lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft (raw, json)
Hash identifier: vL8Iot59VRMOcVh0KxS1MFt0qmyoHKdagy4JHjHtGso=
Subject key identifier: 69:AD:E1:EA:2D:9E:81:DE:C9:A7:52:12:44:B8:F7:E1:43:A1:BF:3E
Authority key identifier: 94:81:E9:46:CF:C8:E1:9C:16:67:AF:37:5D:10:A1:E4:04:2F:0E:B9
Certificate issuer: /CN=9481e946cfc8e19c1667af375d10a1e4042f0eb9
Certificate serial: 0197C2DBAF43C3B3CA7D9AB71BE86E5AE345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
Manifest number: 04D2
Signing time: Mon 30 Jun 2025 22:01:06 +0000
Manifest this update: Mon 30 Jun 2025 22:01:06 +0000
Manifest next update: Tue 01 Jul 2025 22:01:06 +0000
Files and hashes: 1: lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl (hash: hIrEqxul9jGdzXRPqWZEaEkaaaECXHa0SACe0w0V4ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:db:af:43:c3:b3:ca:7d:9a:b7:1b:e8:6e:5a:e3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9481e946cfc8e19c1667af375d10a1e4042f0eb9
Validity
Not Before: Jun 30 22:01:06 2025 GMT
Not After : Jul 1 22:01:06 2025 GMT
Subject: CN=69ade1ea2d9e81dec9a7521244b8f7e143a1bf3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b0:6b:6b:d8:1a:82:0a:32:9e:96:20:05:92:
e8:64:42:02:61:0f:cf:05:de:4e:60:39:ec:b0:64:
28:6a:7a:a1:b4:fd:eb:24:dd:a9:2a:43:67:3d:3e:
e5:f0:bf:fa:8d:eb:4a:5b:e5:f5:59:12:8d:ea:7c:
93:59:71:77:b5:50:9c:38:5b:fc:eb:d0:a2:c5:f6:
73:90:36:37:32:45:01:88:f7:df:ed:92:8f:7c:91:
dc:0a:94:0b:a9:9f:03:ae:2f:4d:fa:ff:ad:e8:b9:
17:20:d1:bc:ba:22:93:61:f2:bb:54:98:f0:c4:3c:
9d:2d:26:38:03:36:d6:6a:bf:af:72:51:0f:74:43:
1b:fa:dc:18:3d:e7:a6:9c:08:7e:45:9f:e7:67:65:
80:7b:8e:7d:d5:72:b9:5a:bf:6e:d5:c5:37:e0:2c:
f4:89:09:9c:eb:62:a0:cb:b5:47:fb:30:00:db:58:
35:3b:fe:de:98:76:ff:4c:9b:28:86:60:17:95:62:
87:9c:a6:74:7f:77:58:33:69:5d:da:49:ab:67:af:
4d:21:bb:23:80:8c:da:28:21:d8:1b:64:d4:5b:5b:
9b:66:ff:4e:3f:b8:80:89:f3:5f:45:6e:17:5c:98:
d4:65:38:ad:74:9a:21:16:57:ec:7c:40:a1:1b:72:
a5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:AD:E1:EA:2D:9E:81:DE:C9:A7:52:12:44:B8:F7:E1:43:A1:BF:3E
X509v3 Authority Key Identifier:
keyid:94:81:E9:46:CF:C8:E1:9C:16:67:AF:37:5D:10:A1:E4:04:2F:0E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lIHpRs_I4ZwWZ683XRCh5AQvDrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/13c33a-a46f-4889-b809-57303aa45cbb/1/lIHpRs_I4ZwWZ683XRCh5AQvDrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:db:eb:24:d5:b0:94:8c:8f:0a:9b:73:43:3e:73:5f:ad:46:
4a:a1:f8:65:6e:87:bf:06:de:ab:4a:c0:e9:82:b7:4d:70:f4:
1d:f6:a1:2d:aa:42:f8:a8:90:b3:4a:f6:90:30:1d:82:3e:24:
4b:0e:50:47:ba:b9:38:a7:db:f2:b3:2e:be:1b:61:85:75:0b:
dc:3b:b1:e8:d7:a1:61:63:5d:4d:c4:94:f5:7a:d4:5b:9a:3b:
b8:60:8c:68:f5:64:7d:9b:a9:b2:a1:a8:2a:d2:26:73:34:41:
a9:e5:dd:9c:92:ad:80:7f:21:95:fd:10:ae:2f:33:ce:6e:07:
67:ec:04:0d:f6:5a:7b:fa:0b:89:bd:12:ac:34:6f:ec:f2:39:
cc:e8:ee:24:64:33:34:dd:20:3d:59:ca:96:f6:dd:bb:26:6d:
af:e5:41:72:d4:23:76:3c:d3:7a:7f:65:18:28:46:42:6a:ba:
ee:0a:74:ea:5c:cd:55:dd:3d:cf:97:6c:0f:5d:75:48:e6:89:
f4:93:c7:55:dc:94:48:14:ef:66:f7:7a:e5:46:c5:9c:e9:c0:
db:8b:36:a6:bf:32:3d:42:be:12:d5:ee:b2:f5:5c:b7:6c:53:
b0:01:45:44:b9:02:49:cf:f8:68:49:34:53:a2:79:da:23:b7:
e0:86:f1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:06:25 2025 by rpki-client